ZAP API Scan Report

- Site: [https://mds-permits-test.apps.silver.devops.gov.bc.ca](https://mds-permits-test.apps.silver.devops.gov.bc.ca)
**New Alerts**
- **A Server Error response code was returned by the server** [100000] total: 7:
- [https://mds-permits-test.apps.silver.devops.gov.bc.ca/computeMetadata/v1/](https://mds-permits-test.apps.silver.devops.gov.bc.ca/computeMetadata/v1/)
- [https://mds-permits-test.apps.silver.devops.gov.bc.ca/latest/meta-data/](https://mds-permits-test.apps.silver.devops.gov.bc.ca/latest/meta-data/)
- [https://mds-permits-test.apps.silver.devops.gov.bc.ca/metadata/instance](https://mds-permits-test.apps.silver.devops.gov.bc.ca/metadata/instance)
- [https://mds-permits-test.apps.silver.devops.gov.bc.ca/metadata/v1](https://mds-permits-test.apps.silver.devops.gov.bc.ca/metadata/v1)
- [https://mds-permits-test.apps.silver.devops.gov.bc.ca/opc/v1/instance/](https://mds-permits-test.apps.silver.devops.gov.bc.ca/opc/v1/instance/)
- ..
- **Unexpected Content-Type was returned** [100001] total: 7:
- [https://mds-permits-test.apps.silver.devops.gov.bc.ca/computeMetadata/v1/](https://mds-permits-test.apps.silver.devops.gov.bc.ca/computeMetadata/v1/)
- [https://mds-permits-test.apps.silver.devops.gov.bc.ca/latest/meta-data/](https://mds-permits-test.apps.silver.devops.gov.bc.ca/latest/meta-data/)
- [https://mds-permits-test.apps.silver.devops.gov.bc.ca/metadata/instance](https://mds-permits-test.apps.silver.devops.gov.bc.ca/metadata/instance)
- [https://mds-permits-test.apps.silver.devops.gov.bc.ca/metadata/v1](https://mds-permits-test.apps.silver.devops.gov.bc.ca/metadata/v1)
- [https://mds-permits-test.apps.silver.devops.gov.bc.ca/opc/v1/instance/](https://mds-permits-test.apps.silver.devops.gov.bc.ca/opc/v1/instance/)
- ..
- **A Client Error response code was returned by the server** [100000] total: 49:
- [https://mds-permits-test.apps.silver.devops.gov.bc.ca/document_search/now_application_guid/index](https://mds-permits-test.apps.silver.devops.gov.bc.ca/document_search/now_application_guid/index)
- [https://mds-permits-test.apps.silver.devops.gov.bc.ca/document_search/now_application_guid/index/](https://mds-permits-test.apps.silver.devops.gov.bc.ca/document_search/now_application_guid/index/)
- [https://mds-permits-test.apps.silver.devops.gov.bc.ca](https://mds-permits-test.apps.silver.devops.gov.bc.ca)
- [https://mds-permits-test.apps.silver.devops.gov.bc.ca/](https://mds-permits-test.apps.silver.devops.gov.bc.ca/)
- [https://mds-permits-test.apps.silver.devops.gov.bc.ca/8100798930801597826](https://mds-permits-test.apps.silver.devops.gov.bc.ca/8100798930801597826)
- ..
- **Non-Storable Content** [10049] total: 5:
- [https://mds-permits-test.apps.silver.devops.gov.bc.ca/permit_conditions/flow](https://mds-permits-test.apps.silver.devops.gov.bc.ca/permit_conditions/flow)
- [https://mds-permits-test.apps.silver.devops.gov.bc.ca/permit_conditions/results?task_id=task_id](https://mds-permits-test.apps.silver.devops.gov.bc.ca/permit_conditions/results?task_id=task_id)
- [https://mds-permits-test.apps.silver.devops.gov.bc.ca/permit_conditions/results/csv?task_id=task_id](https://mds-permits-test.apps.silver.devops.gov.bc.ca/permit_conditions/results/csv?task_id=task_id)
- [https://mds-permits-test.apps.silver.devops.gov.bc.ca/permit_conditions/status?task_id=task_id](https://mds-permits-test.apps.silver.devops.gov.bc.ca/permit_conditions/status?task_id=task_id)
- [https://mds-permits-test.apps.silver.devops.gov.bc.ca/permit_conditions](https://mds-permits-test.apps.silver.devops.gov.bc.ca/permit_conditions)
- **Re-examine Cache-control Directives** [10015] total: 1:
- [https://mds-permits-test.apps.silver.devops.gov.bc.ca/openapi.json](https://mds-permits-test.apps.silver.devops.gov.bc.ca/openapi.json)
- **Session Management Response Identified** [10112] total: 13:
- [https://mds-permits-test.apps.silver.devops.gov.bc.ca/document_search/now_application_guid/index](https://mds-permits-test.apps.silver.devops.gov.bc.ca/document_search/now_application_guid/index)
- [https://mds-permits-test.apps.silver.devops.gov.bc.ca/document_search/now_application_guid/index/status](https://mds-permits-test.apps.silver.devops.gov.bc.ca/document_search/now_application_guid/index/status)
- [https://mds-permits-test.apps.silver.devops.gov.bc.ca/openapi.json](https://mds-permits-test.apps.silver.devops.gov.bc.ca/openapi.json)
- [https://mds-permits-test.apps.silver.devops.gov.bc.ca/permit_conditions/flow](https://mds-permits-test.apps.silver.devops.gov.bc.ca/permit_conditions/flow)
- [https://mds-permits-test.apps.silver.devops.gov.bc.ca/permit_conditions/results?task_id=task_id](https://mds-permits-test.apps.silver.devops.gov.bc.ca/permit_conditions/results?task_id=task_id)
- ..

View the [following link](https://github.com/bcgov/mds/actions/runs/33067616611) to download the report.
RunnerID:33067616611

---
[ZAP by Checkmarx](https://checkmarx.com/)

Download the ZAP report from the linked GitHub Actions run and review the listed alerts against the test site endpoints. Start by confirming which findings are genuine and trace them to the relevant application entry points; done means the confirmed security findings are addressed and a follow-up scan no longer reports them.

Written by the indexing model from the issue text.